@reopt-ai/data-contract 0.1.0 → 0.3.0

package/dist/control.d.cts

@@ -0,0 +1,181 @@
+import { z } from 'zod';
+
+/**
+ * `POST /api/v1/organizations` · `/api/v1/projects` and friends — the
+ * provisioning contract.
+ *
+ * A project-scoped client credential cannot authenticate the creation of the
+ * project it is scoped to, and an organization key cannot authenticate the
+ * creation of its own organization. So provisioning runs on two credentials
+ * above the client one: a platform key that creates organizations and writes
+ * quotas, and an organization key that creates and deletes projects inside one
+ * organization.
+ *
+ * Quota writes sit with the platform key on purpose. Organization keys are held
+ * one-per-workspace by the caller and so have a wide exposure surface; a leaked
+ * one that could raise its own limits would turn a credential leak into an
+ * unbounded bill.
+ */
+
+declare const PLATFORM_KEY_HEADER = "reopt-platform-key";
+declare const ORG_KEY_HEADER = "reopt-org-key";
+/**
+ * The caller's own id for the thing being provisioned.
+ *
+ * Preferred over an `Idempotency-Key` header because this domain has a real
+ * natural key — the caller already has a stable id for the workspace or brand —
+ * and a header would make the caller store a second one just to retry safely.
+ */
+declare const zExternalId: z.ZodString;
+declare const zCreateOrganizationInput: z.ZodObject<{
+    externalId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodOptional<z.ZodString>;
+    monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
+    monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CreateOrganizationInput = z.input<typeof zCreateOrganizationInput>;
+declare const zOrganization: z.ZodObject<{
+    id: z.ZodString;
+    externalId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    monthlyEventQuota: z.ZodNumber;
+    monthlyCreditQuota: z.ZodNumber;
+}, z.core.$strip>;
+declare const zCreateOrganizationResponse: z.ZodObject<{
+    created: z.ZodBoolean;
+    organization: z.ZodObject<{
+        id: z.ZodString;
+        externalId: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodString;
+        monthlyEventQuota: z.ZodNumber;
+        monthlyCreditQuota: z.ZodNumber;
+    }, z.core.$strip>;
+    orgKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type CreateOrganizationResponse = z.infer<typeof zCreateOrganizationResponse>;
+declare const zRotateOrganizationKeyResponse: z.ZodObject<{
+    organizationId: z.ZodString;
+    keyPrefix: z.ZodString;
+    orgKey: z.ZodString;
+}, z.core.$strip>;
+type RotateOrganizationKeyResponse = z.infer<typeof zRotateOrganizationKeyResponse>;
+declare const zUpdateOrganizationQuotaInput: z.ZodObject<{
+    monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
+    monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type UpdateOrganizationQuotaInput = z.input<typeof zUpdateOrganizationQuotaInput>;
+declare const zUpdateOrganizationQuotaResponse: z.ZodObject<{
+    organization: z.ZodObject<{
+        id: z.ZodString;
+        externalId: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodString;
+        monthlyEventQuota: z.ZodNumber;
+        monthlyCreditQuota: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type UpdateOrganizationQuotaResponse = z.infer<typeof zUpdateOrganizationQuotaResponse>;
+declare const zCreateProjectInput: z.ZodObject<{
+    externalId: z.ZodString;
+    name: z.ZodString;
+    domain: z.ZodOptional<z.ZodString>;
+    timezone: z.ZodOptional<z.ZodString>;
+    retentionDays: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CreateProjectInput = z.input<typeof zCreateProjectInput>;
+declare const zProject: z.ZodObject<{
+    id: z.ZodString;
+    externalId: z.ZodString;
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    timezone: z.ZodString;
+    retentionDays: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+declare const zCreateProjectResponse: z.ZodObject<{
+    created: z.ZodBoolean;
+    project: z.ZodObject<{
+        id: z.ZodString;
+        externalId: z.ZodString;
+        organizationId: z.ZodString;
+        name: z.ZodString;
+        timezone: z.ZodString;
+        retentionDays: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    clients: z.ZodObject<{
+        browser: z.ZodObject<{
+            id: z.ZodString;
+            writeKey: z.ZodString;
+            scopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        server: z.ZodObject<{
+            id: z.ZodString;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type CreateProjectResponse = z.infer<typeof zCreateProjectResponse>;
+declare const zRotateClientSecretResponse: z.ZodObject<{
+    projectId: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+}, z.core.$strip>;
+type RotateClientSecretResponse = z.infer<typeof zRotateClientSecretResponse>;
+declare const zDeleteProjectInput: z.ZodObject<{
+    purge: z.ZodLiteral<true>;
+    externalId: z.ZodString;
+}, z.core.$strip>;
+type DeleteProjectInput = z.input<typeof zDeleteProjectInput>;
+declare const zDeleteProjectResponse: z.ZodObject<{
+    projectId: z.ZodString;
+    purge: z.ZodEnum<{
+        queued: "queued";
+        "already-absent": "already-absent";
+    }>;
+    purgingAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type DeleteProjectResponse = z.infer<typeof zDeleteProjectResponse>;
+declare const CONTROL_ERROR_CODES: readonly ["unauthorized", "organization_scope_mismatch", "external_id_conflict", "project_external_id_mismatch", "not_found", "validation_failed", "rate_limited", "internal_error"];
+declare const zControlErrorCode: z.ZodEnum<{
+    validation_failed: "validation_failed";
+    unauthorized: "unauthorized";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
+    organization_scope_mismatch: "organization_scope_mismatch";
+    external_id_conflict: "external_id_conflict";
+    project_external_id_mismatch: "project_external_id_mismatch";
+    not_found: "not_found";
+}>;
+type ControlErrorCode = z.infer<typeof zControlErrorCode>;
+declare const zControlError: z.ZodObject<{
+    status: z.ZodNumber;
+    code: z.ZodEnum<{
+        validation_failed: "validation_failed";
+        unauthorized: "unauthorized";
+        rate_limited: "rate_limited";
+        internal_error: "internal_error";
+        organization_scope_mismatch: "organization_scope_mismatch";
+        external_id_conflict: "external_id_conflict";
+        project_external_id_mismatch: "project_external_id_mismatch";
+        not_found: "not_found";
+    }>;
+    error: z.ZodString;
+    message: z.ZodOptional<z.ZodString>;
+    errors: z.ZodOptional<z.ZodUnknown>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type ControlError = z.infer<typeof zControlError>;
+/** Paths, so the client and the route handlers cannot drift apart. */
+declare const CONTROL_API_PATHS: {
+    readonly organizations: "/api/v1/organizations";
+    readonly organization: (id: string) => string;
+    readonly organizationKeys: (id: string) => string;
+    readonly projects: "/api/v1/projects";
+    readonly project: (id: string) => string;
+    readonly clientRotate: (projectId: string, clientId: string) => string;
+};
+
+export { CONTROL_API_PATHS, CONTROL_ERROR_CODES, type ControlError, type ControlErrorCode, type CreateOrganizationInput, type CreateOrganizationResponse, type CreateProjectInput, type CreateProjectResponse, type DeleteProjectInput, type DeleteProjectResponse, ORG_KEY_HEADER, PLATFORM_KEY_HEADER, type RotateClientSecretResponse, type RotateOrganizationKeyResponse, type UpdateOrganizationQuotaInput, type UpdateOrganizationQuotaResponse, zControlError, zControlErrorCode, zCreateOrganizationInput, zCreateOrganizationResponse, zCreateProjectInput, zCreateProjectResponse, zDeleteProjectInput, zDeleteProjectResponse, zExternalId, zOrganization, zProject, zRotateClientSecretResponse, zRotateOrganizationKeyResponse, zUpdateOrganizationQuotaInput, zUpdateOrganizationQuotaResponse };

package/dist/control.d.ts

@@ -0,0 +1,181 @@
+import { z } from 'zod';
+
+/**
+ * `POST /api/v1/organizations` · `/api/v1/projects` and friends — the
+ * provisioning contract.
+ *
+ * A project-scoped client credential cannot authenticate the creation of the
+ * project it is scoped to, and an organization key cannot authenticate the
+ * creation of its own organization. So provisioning runs on two credentials
+ * above the client one: a platform key that creates organizations and writes
+ * quotas, and an organization key that creates and deletes projects inside one
+ * organization.
+ *
+ * Quota writes sit with the platform key on purpose. Organization keys are held
+ * one-per-workspace by the caller and so have a wide exposure surface; a leaked
+ * one that could raise its own limits would turn a credential leak into an
+ * unbounded bill.
+ */
+
+declare const PLATFORM_KEY_HEADER = "reopt-platform-key";
+declare const ORG_KEY_HEADER = "reopt-org-key";
+/**
+ * The caller's own id for the thing being provisioned.
+ *
+ * Preferred over an `Idempotency-Key` header because this domain has a real
+ * natural key — the caller already has a stable id for the workspace or brand —
+ * and a header would make the caller store a second one just to retry safely.
+ */
+declare const zExternalId: z.ZodString;
+declare const zCreateOrganizationInput: z.ZodObject<{
+    externalId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodOptional<z.ZodString>;
+    monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
+    monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CreateOrganizationInput = z.input<typeof zCreateOrganizationInput>;
+declare const zOrganization: z.ZodObject<{
+    id: z.ZodString;
+    externalId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    monthlyEventQuota: z.ZodNumber;
+    monthlyCreditQuota: z.ZodNumber;
+}, z.core.$strip>;
+declare const zCreateOrganizationResponse: z.ZodObject<{
+    created: z.ZodBoolean;
+    organization: z.ZodObject<{
+        id: z.ZodString;
+        externalId: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodString;
+        monthlyEventQuota: z.ZodNumber;
+        monthlyCreditQuota: z.ZodNumber;
+    }, z.core.$strip>;
+    orgKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type CreateOrganizationResponse = z.infer<typeof zCreateOrganizationResponse>;
+declare const zRotateOrganizationKeyResponse: z.ZodObject<{
+    organizationId: z.ZodString;
+    keyPrefix: z.ZodString;
+    orgKey: z.ZodString;
+}, z.core.$strip>;
+type RotateOrganizationKeyResponse = z.infer<typeof zRotateOrganizationKeyResponse>;
+declare const zUpdateOrganizationQuotaInput: z.ZodObject<{
+    monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
+    monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type UpdateOrganizationQuotaInput = z.input<typeof zUpdateOrganizationQuotaInput>;
+declare const zUpdateOrganizationQuotaResponse: z.ZodObject<{
+    organization: z.ZodObject<{
+        id: z.ZodString;
+        externalId: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodString;
+        monthlyEventQuota: z.ZodNumber;
+        monthlyCreditQuota: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type UpdateOrganizationQuotaResponse = z.infer<typeof zUpdateOrganizationQuotaResponse>;
+declare const zCreateProjectInput: z.ZodObject<{
+    externalId: z.ZodString;
+    name: z.ZodString;
+    domain: z.ZodOptional<z.ZodString>;
+    timezone: z.ZodOptional<z.ZodString>;
+    retentionDays: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CreateProjectInput = z.input<typeof zCreateProjectInput>;
+declare const zProject: z.ZodObject<{
+    id: z.ZodString;
+    externalId: z.ZodString;
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    timezone: z.ZodString;
+    retentionDays: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+declare const zCreateProjectResponse: z.ZodObject<{
+    created: z.ZodBoolean;
+    project: z.ZodObject<{
+        id: z.ZodString;
+        externalId: z.ZodString;
+        organizationId: z.ZodString;
+        name: z.ZodString;
+        timezone: z.ZodString;
+        retentionDays: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    clients: z.ZodObject<{
+        browser: z.ZodObject<{
+            id: z.ZodString;
+            writeKey: z.ZodString;
+            scopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        server: z.ZodObject<{
+            id: z.ZodString;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type CreateProjectResponse = z.infer<typeof zCreateProjectResponse>;
+declare const zRotateClientSecretResponse: z.ZodObject<{
+    projectId: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+}, z.core.$strip>;
+type RotateClientSecretResponse = z.infer<typeof zRotateClientSecretResponse>;
+declare const zDeleteProjectInput: z.ZodObject<{
+    purge: z.ZodLiteral<true>;
+    externalId: z.ZodString;
+}, z.core.$strip>;
+type DeleteProjectInput = z.input<typeof zDeleteProjectInput>;
+declare const zDeleteProjectResponse: z.ZodObject<{
+    projectId: z.ZodString;
+    purge: z.ZodEnum<{
+        queued: "queued";
+        "already-absent": "already-absent";
+    }>;
+    purgingAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type DeleteProjectResponse = z.infer<typeof zDeleteProjectResponse>;
+declare const CONTROL_ERROR_CODES: readonly ["unauthorized", "organization_scope_mismatch", "external_id_conflict", "project_external_id_mismatch", "not_found", "validation_failed", "rate_limited", "internal_error"];
+declare const zControlErrorCode: z.ZodEnum<{
+    validation_failed: "validation_failed";
+    unauthorized: "unauthorized";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
+    organization_scope_mismatch: "organization_scope_mismatch";
+    external_id_conflict: "external_id_conflict";
+    project_external_id_mismatch: "project_external_id_mismatch";
+    not_found: "not_found";
+}>;
+type ControlErrorCode = z.infer<typeof zControlErrorCode>;
+declare const zControlError: z.ZodObject<{
+    status: z.ZodNumber;
+    code: z.ZodEnum<{
+        validation_failed: "validation_failed";
+        unauthorized: "unauthorized";
+        rate_limited: "rate_limited";
+        internal_error: "internal_error";
+        organization_scope_mismatch: "organization_scope_mismatch";
+        external_id_conflict: "external_id_conflict";
+        project_external_id_mismatch: "project_external_id_mismatch";
+        not_found: "not_found";
+    }>;
+    error: z.ZodString;
+    message: z.ZodOptional<z.ZodString>;
+    errors: z.ZodOptional<z.ZodUnknown>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type ControlError = z.infer<typeof zControlError>;
+/** Paths, so the client and the route handlers cannot drift apart. */
+declare const CONTROL_API_PATHS: {
+    readonly organizations: "/api/v1/organizations";
+    readonly organization: (id: string) => string;
+    readonly organizationKeys: (id: string) => string;
+    readonly projects: "/api/v1/projects";
+    readonly project: (id: string) => string;
+    readonly clientRotate: (projectId: string, clientId: string) => string;
+};
+
+export { CONTROL_API_PATHS, CONTROL_ERROR_CODES, type ControlError, type ControlErrorCode, type CreateOrganizationInput, type CreateOrganizationResponse, type CreateProjectInput, type CreateProjectResponse, type DeleteProjectInput, type DeleteProjectResponse, ORG_KEY_HEADER, PLATFORM_KEY_HEADER, type RotateClientSecretResponse, type RotateOrganizationKeyResponse, type UpdateOrganizationQuotaInput, type UpdateOrganizationQuotaResponse, zControlError, zControlErrorCode, zCreateOrganizationInput, zCreateOrganizationResponse, zCreateProjectInput, zCreateProjectResponse, zDeleteProjectInput, zDeleteProjectResponse, zExternalId, zOrganization, zProject, zRotateClientSecretResponse, zRotateOrganizationKeyResponse, zUpdateOrganizationQuotaInput, zUpdateOrganizationQuotaResponse };

package/dist/control.js

@@ -0,0 +1,45 @@
+import {
+  CONTROL_API_PATHS,
+  CONTROL_ERROR_CODES,
+  ORG_KEY_HEADER,
+  PLATFORM_KEY_HEADER,
+  zControlError,
+  zControlErrorCode,
+  zCreateOrganizationInput,
+  zCreateOrganizationResponse,
+  zCreateProjectInput,
+  zCreateProjectResponse,
+  zDeleteProjectInput,
+  zDeleteProjectResponse,
+  zExternalId,
+  zOrganization,
+  zProject,
+  zRotateClientSecretResponse,
+  zRotateOrganizationKeyResponse,
+  zUpdateOrganizationQuotaInput,
+  zUpdateOrganizationQuotaResponse
+} from "./chunk-J4VD3TLV.js";
+import "./chunk-55IWO4S3.js";
+import "./chunk-2LJ7JLDX.js";
+export {
+  CONTROL_API_PATHS,
+  CONTROL_ERROR_CODES,
+  ORG_KEY_HEADER,
+  PLATFORM_KEY_HEADER,
+  zControlError,
+  zControlErrorCode,
+  zCreateOrganizationInput,
+  zCreateOrganizationResponse,
+  zCreateProjectInput,
+  zCreateProjectResponse,
+  zDeleteProjectInput,
+  zDeleteProjectResponse,
+  zExternalId,
+  zOrganization,
+  zProject,
+  zRotateClientSecretResponse,
+  zRotateOrganizationKeyResponse,
+  zUpdateOrganizationQuotaInput,
+  zUpdateOrganizationQuotaResponse
+};
+//# sourceMappingURL=control.js.map

package/dist/control.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.cjs

@@ -9,7 +9,7 @@
 
 
 
-var _chunkZQVRSCTWcjs = require('./chunk-ZQVRSCTW.cjs');
+var _chunkKXEQGD3Ecjs = require('./chunk-KXEQGD3E.cjs');
 
 
 
@@ -21,5 +21,5 @@ var _chunkZQVRSCTWcjs = require('./chunk-ZQVRSCTW.cjs');
 
 
 
-exports.CLIENT_ID_HEADER = _chunkZQVRSCTWcjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkZQVRSCTWcjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkZQVRSCTWcjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkZQVRSCTWcjs.CONTRACT_VERSION_HEADER; exports.DEVICE_ID_HEADER = _chunkZQVRSCTWcjs.DEVICE_ID_HEADER; exports.DataApiError = _chunkZQVRSCTWcjs.DataApiError; exports.REQUEST_ID_HEADER = _chunkZQVRSCTWcjs.REQUEST_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkZQVRSCTWcjs.WRITE_KEY_HEADER; exports.zDate = _chunkZQVRSCTWcjs.zDate; exports.zInstant = _chunkZQVRSCTWcjs.zInstant;
+exports.CLIENT_ID_HEADER = _chunkKXEQGD3Ecjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkKXEQGD3Ecjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkKXEQGD3Ecjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkKXEQGD3Ecjs.CONTRACT_VERSION_HEADER; exports.DEVICE_ID_HEADER = _chunkKXEQGD3Ecjs.DEVICE_ID_HEADER; exports.DataApiError = _chunkKXEQGD3Ecjs.DataApiError; exports.REQUEST_ID_HEADER = _chunkKXEQGD3Ecjs.REQUEST_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkKXEQGD3Ecjs.WRITE_KEY_HEADER; exports.zDate = _chunkKXEQGD3Ecjs.zDate; exports.zInstant = _chunkKXEQGD3Ecjs.zInstant;
 //# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -8,7 +8,8 @@ import { z } from 'zod';
  *   `@reopt-ai/data-contract`         this module — version, shared primitives, errors
  *   `@reopt-ai/data-contract/ingest`  POST /api/track request + response schemas
  *   `@reopt-ai/data-contract/query`   POST /api/v1/query/* request + response schemas
- *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over both
+ *   `@reopt-ai/data-contract/control` provisioning request + response schemas
+ *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over all
  *
  * Only `/client` touches `fetch`; everything else is pure zod. The single
  * runtime dependency is zod, deliberately — consumers bundle this.
@@ -19,7 +20,7 @@ import { z } from 'zod';
  * The server echoes the version it was built against in `x-reopt-contract-version`;
  * `createDataClient` surfaces a mismatch rather than guessing.
  */
-declare const CONTRACT_VERSION = "0.1.0";
+declare const CONTRACT_VERSION = "0.3.0";
 /** Response header carrying the server's contract version. */
 declare const CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
 /** Request header names shared by the ingest and query planes. */
@@ -44,6 +45,17 @@ interface ClientCredentials {
     clientId: string;
     clientSecret: string;
 }
+/**
+ * Credentials are optional on the client itself because the provisioning
+ * surface does not use them — it authenticates per call with a platform or
+ * organization key. A caller that only provisions should not have to invent an
+ * empty client id to satisfy a constructor.
+ *
+ * Reaching ingest or query without them fails with `credentials_missing`
+ * rather than sending an unauthenticated request and reporting the 401 as a
+ * server problem.
+ */
+type OptionalClientCredentials = Partial<ClientCredentials>;
 /**
  * Every non-2xx response from either plane, plus the two failures the client
  * itself raises (`contract_mismatch`, `network_error`).
@@ -80,4 +92,4 @@ declare class DataApiError extends Error {
     static is(value: unknown): value is DataApiError;
 }
 
-export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, type ClientCredentials, DEVICE_ID_HEADER, DataApiError, REQUEST_ID_HEADER, WRITE_KEY_HEADER, zDate, zInstant };
+export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, type ClientCredentials, DEVICE_ID_HEADER, DataApiError, type OptionalClientCredentials, REQUEST_ID_HEADER, WRITE_KEY_HEADER, zDate, zInstant };

package/dist/index.d.ts

@@ -8,7 +8,8 @@ import { z } from 'zod';
  *   `@reopt-ai/data-contract`         this module — version, shared primitives, errors
  *   `@reopt-ai/data-contract/ingest`  POST /api/track request + response schemas
  *   `@reopt-ai/data-contract/query`   POST /api/v1/query/* request + response schemas
- *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over both
+ *   `@reopt-ai/data-contract/control` provisioning request + response schemas
+ *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over all
  *
  * Only `/client` touches `fetch`; everything else is pure zod. The single
  * runtime dependency is zod, deliberately — consumers bundle this.
@@ -19,7 +20,7 @@ import { z } from 'zod';
  * The server echoes the version it was built against in `x-reopt-contract-version`;
  * `createDataClient` surfaces a mismatch rather than guessing.
  */
-declare const CONTRACT_VERSION = "0.1.0";
+declare const CONTRACT_VERSION = "0.3.0";
 /** Response header carrying the server's contract version. */
 declare const CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
 /** Request header names shared by the ingest and query planes. */
@@ -44,6 +45,17 @@ interface ClientCredentials {
     clientId: string;
     clientSecret: string;
 }
+/**
+ * Credentials are optional on the client itself because the provisioning
+ * surface does not use them — it authenticates per call with a platform or
+ * organization key. A caller that only provisions should not have to invent an
+ * empty client id to satisfy a constructor.
+ *
+ * Reaching ingest or query without them fails with `credentials_missing`
+ * rather than sending an unauthenticated request and reporting the 401 as a
+ * server problem.
+ */
+type OptionalClientCredentials = Partial<ClientCredentials>;
 /**
  * Every non-2xx response from either plane, plus the two failures the client
  * itself raises (`contract_mismatch`, `network_error`).
@@ -80,4 +92,4 @@ declare class DataApiError extends Error {
     static is(value: unknown): value is DataApiError;
 }
 
-export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, type ClientCredentials, DEVICE_ID_HEADER, DataApiError, REQUEST_ID_HEADER, WRITE_KEY_HEADER, zDate, zInstant };
+export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, type ClientCredentials, DEVICE_ID_HEADER, DataApiError, type OptionalClientCredentials, REQUEST_ID_HEADER, WRITE_KEY_HEADER, zDate, zInstant };

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   WRITE_KEY_HEADER,
   zDate,
   zInstant
-} from "./chunk-IAOPUBJU.js";
+} from "./chunk-2LJ7JLDX.js";
 export {
   CLIENT_ID_HEADER,
   CLIENT_SECRET_HEADER,

package/dist/ingest.cjs

@@ -18,7 +18,7 @@
 
 
 
-var _chunkHRKELGGHcjs = require('./chunk-HRKELGGH.cjs');
+var _chunkRDPPPFGOcjs = require('./chunk-RDPPPFGO.cjs');
 
 
 
@@ -39,5 +39,5 @@ var _chunkHRKELGGHcjs = require('./chunk-HRKELGGH.cjs');
 
 
 
-exports.INGEST_ERROR_CODES = _chunkHRKELGGHcjs.INGEST_ERROR_CODES; exports.INGEST_MODES = _chunkHRKELGGHcjs.INGEST_MODES; exports.INGEST_REJECTION_REASONS = _chunkHRKELGGHcjs.INGEST_REJECTION_REASONS; exports.MAX_TRACK_PAYLOAD_BYTES = _chunkHRKELGGHcjs.MAX_TRACK_PAYLOAD_BYTES; exports.RESERVED_EVENT_NAMES = _chunkHRKELGGHcjs.RESERVED_EVENT_NAMES; exports.reconcileIngestResponse = _chunkHRKELGGHcjs.reconcileIngestResponse; exports.zDecrementPayload = _chunkHRKELGGHcjs.zDecrementPayload; exports.zIdentifyPayload = _chunkHRKELGGHcjs.zIdentifyPayload; exports.zIncrementPayload = _chunkHRKELGGHcjs.zIncrementPayload; exports.zIngestAcceptedResponse = _chunkHRKELGGHcjs.zIngestAcceptedResponse; exports.zIngestError = _chunkHRKELGGHcjs.zIngestError; exports.zIngestErrorCode = _chunkHRKELGGHcjs.zIngestErrorCode; exports.zIngestMode = _chunkHRKELGGHcjs.zIngestMode; exports.zIngestOkResponse = _chunkHRKELGGHcjs.zIngestOkResponse; exports.zIngestRejection = _chunkHRKELGGHcjs.zIngestRejection; exports.zIngestRejectionReason = _chunkHRKELGGHcjs.zIngestRejectionReason; exports.zIngestResponse = _chunkHRKELGGHcjs.zIngestResponse; exports.zTrackHandlerPayload = _chunkHRKELGGHcjs.zTrackHandlerPayload; exports.zTrackPayload = _chunkHRKELGGHcjs.zTrackPayload;
+exports.INGEST_ERROR_CODES = _chunkRDPPPFGOcjs.INGEST_ERROR_CODES; exports.INGEST_MODES = _chunkRDPPPFGOcjs.INGEST_MODES; exports.INGEST_REJECTION_REASONS = _chunkRDPPPFGOcjs.INGEST_REJECTION_REASONS; exports.MAX_TRACK_PAYLOAD_BYTES = _chunkRDPPPFGOcjs.MAX_TRACK_PAYLOAD_BYTES; exports.RESERVED_EVENT_NAMES = _chunkRDPPPFGOcjs.RESERVED_EVENT_NAMES; exports.reconcileIngestResponse = _chunkRDPPPFGOcjs.reconcileIngestResponse; exports.zDecrementPayload = _chunkRDPPPFGOcjs.zDecrementPayload; exports.zIdentifyPayload = _chunkRDPPPFGOcjs.zIdentifyPayload; exports.zIncrementPayload = _chunkRDPPPFGOcjs.zIncrementPayload; exports.zIngestAcceptedResponse = _chunkRDPPPFGOcjs.zIngestAcceptedResponse; exports.zIngestError = _chunkRDPPPFGOcjs.zIngestError; exports.zIngestErrorCode = _chunkRDPPPFGOcjs.zIngestErrorCode; exports.zIngestMode = _chunkRDPPPFGOcjs.zIngestMode; exports.zIngestOkResponse = _chunkRDPPPFGOcjs.zIngestOkResponse; exports.zIngestRejection = _chunkRDPPPFGOcjs.zIngestRejection; exports.zIngestRejectionReason = _chunkRDPPPFGOcjs.zIngestRejectionReason; exports.zIngestResponse = _chunkRDPPPFGOcjs.zIngestResponse; exports.zTrackHandlerPayload = _chunkRDPPPFGOcjs.zTrackHandlerPayload; exports.zTrackPayload = _chunkRDPPPFGOcjs.zTrackPayload;
 //# sourceMappingURL=ingest.cjs.map

package/dist/ingest.d.cts

@@ -232,33 +232,35 @@ declare function reconcileIngestResponse(response: IngestResponse, sentCount: nu
  * Stable machine-readable codes. Branch on these, never on `error`/`message`,
  * which are prose and may be reworded.
  */
-declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "internal_error"];
+declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "project_purging", "internal_error"];
 declare const zIngestErrorCode: z.ZodEnum<{
-    unauthorized: "unauthorized";
     validation_failed: "validation_failed";
-    rate_limited: "rate_limited";
-    internal_error: "internal_error";
+    unauthorized: "unauthorized";
     invalid_json: "invalid_json";
     payload_too_large: "payload_too_large";
     empty_batch: "empty_batch";
     alias_unsupported: "alias_unsupported";
     project_without_organization: "project_without_organization";
+    rate_limited: "rate_limited";
     quota_exceeded: "quota_exceeded";
+    project_purging: "project_purging";
+    internal_error: "internal_error";
 }>;
 type IngestErrorCode = z.infer<typeof zIngestErrorCode>;
 declare const zIngestError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        unauthorized: "unauthorized";
         validation_failed: "validation_failed";
-        rate_limited: "rate_limited";
-        internal_error: "internal_error";
+        unauthorized: "unauthorized";
         invalid_json: "invalid_json";
         payload_too_large: "payload_too_large";
         empty_batch: "empty_batch";
         alias_unsupported: "alias_unsupported";
         project_without_organization: "project_without_organization";
+        rate_limited: "rate_limited";
         quota_exceeded: "quota_exceeded";
+        project_purging: "project_purging";
+        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;

package/dist/ingest.d.ts

@@ -232,33 +232,35 @@ declare function reconcileIngestResponse(response: IngestResponse, sentCount: nu
  * Stable machine-readable codes. Branch on these, never on `error`/`message`,
  * which are prose and may be reworded.
  */
-declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "internal_error"];
+declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "project_purging", "internal_error"];
 declare const zIngestErrorCode: z.ZodEnum<{
-    unauthorized: "unauthorized";
     validation_failed: "validation_failed";
-    rate_limited: "rate_limited";
-    internal_error: "internal_error";
+    unauthorized: "unauthorized";
     invalid_json: "invalid_json";
     payload_too_large: "payload_too_large";
     empty_batch: "empty_batch";
     alias_unsupported: "alias_unsupported";
     project_without_organization: "project_without_organization";
+    rate_limited: "rate_limited";
     quota_exceeded: "quota_exceeded";
+    project_purging: "project_purging";
+    internal_error: "internal_error";
 }>;
 type IngestErrorCode = z.infer<typeof zIngestErrorCode>;
 declare const zIngestError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        unauthorized: "unauthorized";
         validation_failed: "validation_failed";
-        rate_limited: "rate_limited";
-        internal_error: "internal_error";
+        unauthorized: "unauthorized";
         invalid_json: "invalid_json";
         payload_too_large: "payload_too_large";
         empty_batch: "empty_batch";
         alias_unsupported: "alias_unsupported";
         project_without_organization: "project_without_organization";
+        rate_limited: "rate_limited";
         quota_exceeded: "quota_exceeded";
+        project_purging: "project_purging";
+        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;

package/dist/ingest.js

@@ -18,7 +18,7 @@ import {
   zIngestResponse,
   zTrackHandlerPayload,
   zTrackPayload
-} from "./chunk-FRJK7OCQ.js";
+} from "./chunk-3A7WZ7L6.js";
 export {
   INGEST_ERROR_CODES,
   INGEST_MODES,